Re: [PHP] Variable Variables and Super Global Arrays

I mean that it is open for hacking if you pass a variable name through a URL. Thank you, Micah Gersten onShore Networks Internal Developer http://www.onshore.com daniel danon wrote: > What do you mean? > > On Sun, Oct 12, 2008 at 5:40 PM, Micah Gersten <[EMAIL PROTECTED] >

Re: [PHP] Variable Variables and Super Global Arrays

> That's fine as a test, but you never want to get a variable name from a > URL in practice. Of course you can, as long as it's sanitized and checked. -- Richard Heyes HTML5 Graphing for FF, Chrome, Opera and Safari: http://www.rgraph.org -- PHP General Mailing List (http://www.php.net/) To u

Re: [PHP] Variable Variables and Super Global Arrays

That's fine as a test, but you never want to get a variable name from a URL in practice. Thank you, Micah Gersten onShore Networks Internal Developer http://www.onshore.com Richard Heyes wrote: >> $varname = "\$_SERVER['REMOTE_ADDR']"; >> $varvalue = $$varname; >> > > That's wrong. Offhand

Re: [PHP] Variable Variables and Super Global Arrays

> $varname = "\$_SERVER['REMOTE_ADDR']"; > $varvalue = $$varname; That's wrong. Offhand you'll end up printing a string. I tried this: And it was fine. -- Richard Heyes HTML5 Graphing for FF, Chrome, Opera and Safari: http://www.rgraph.org -- PHP General Mailing List (http://www.php.net/)